Privacy Policy

VAKROS, Inc. ("VAKROS," "we," "us") operates an automation-driven managed security platform. This policy explains what we collect, why, and the controls you have. It applies to our website, platform, and related services (the "Services").

1. Information we collect

Information you provide

When you request a demo, create an account, or contact us, we collect details such as your name, work email, company, company size, industry, and the contents of your messages.

Security telemetry

To deliver SOC monitoring, threat hunting, and automated response, the platform ingests security telemetry from systems you connect — logs, alerts, asset and identity metadata, network and endpoint events, and compliance evidence. You control which integrations are enabled.

Usage & device data

We automatically collect standard log data (IP address, browser type, pages viewed, timestamps) and use essential cookies to keep you signed in and to secure the Services.

2. How we use information

• Operate, monitor, and secure the Services and your environment;
• Detect, investigate, and respond to security threats on your behalf;
• Map security activity to compliance frameworks and generate audit evidence;
• Respond to demo requests, support inquiries, and provide customer communications;
• Improve platform performance, reliability, and detection quality;
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use customer security telemetry to train models for other customers without contractual authorization.

3. Legal bases for processing

Where the GDPR or similar laws apply, we process personal data under one or more of: performance of a contract, our legitimate interests in securing and improving the Services, your consent, and compliance with legal obligations.

4. How we share data

We share information only as needed to run the Services:

• Subprocessors — vetted cloud infrastructure, analytics, and communication providers under contract;
• Within your organization — with authorized users on your account;
• Legal & safety — when required by law or to protect rights, safety, and platform integrity;
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to this policy.

5. Data security

We encrypt data in transit and at rest, enforce least-privilege access and MFA, maintain continuous monitoring of our own environment, and align our controls to SOC 2, ISO 27001, and NIST CSF. No method of transmission is perfectly secure, but we work to protect your data using industry-leading practices.

6. Data retention

We retain personal data for as long as your account is active or as needed to provide the Services, then delete or anonymize it unless a longer period is required by law or for legitimate business and audit purposes. Security telemetry retention is configurable by plan and contract.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object or withdraw consent. To exercise any right, contact us at info@vakros.com. We respond within the timeframes required by applicable law.

8. International data transfers

We may process and store information in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected.

9. Changes & contact

We may update this policy from time to time. Material changes will be posted here with a revised "Last updated" date. Questions about this policy or our data practices can be sent to info@vakros.com.